I don't get it why did you have the creds in the code in the first place?

During development "export AWS_PROFILE=..." is all it takes to provide the creds to any program. And during deployment they're probably running in AWS with an IAM role creds available - in Lambda, Fargate or on EC2.

I wonder why would I ever need to hardcode the AWS creds anywhere...